/config-server

An HTTPS configuration server

Primary LanguageMakefile

config-server

A simple HTTPS configuration server using Client Certificates for authentication.

The server prevents listing the base locations to avoid leading configuration of all environments.

Requirements

This configuration is designed with Docker in mind and requires the m2i3app-client to be utilized.

Test Certificates and Keys

The generation of the test certificates and keys are based on an article about Client Side Certificate Auth in Nginx.

The keys can be generated with "make create-certs". The container depends on it in order to execute the tests.

Sample Usage

Once enabled, the server can be utilised to download different levels of configurations or even propagate scripts

example 1 - downloading a complete directory structure:

wget --certificate=/mnt/hostpwd/certs/client.crt --private-key=/mnt/hostpwd/certs/client.key -e robots=off --no-check-certificate --timestamping -r --no-parent --reject "index.html*" -P ./ -nH --cut-dirs=1  $CFG_SERVER/m2i3app-router.4rdj09j09j/

example 2 - downloading a script and executing it

curl -k --key /mnt/hostpwd/certs/client.key --cert /mnt/hostpwd/certs/client.crt $CFG_SERVER/download-new-router-config.sh | bash